mediumInteger overflow/underflowEVM-Solidity
Panoptic: `removedLiquidity` can be underflowed to lock other user's deposits
- Payout
- $0
- Protocol
- Panoptic
- Disclosed
- Jun 24, 2024
- Source
- code4rena
In Panoptic's SemiFungiblePositionManager, burning a long leg executes `removedLiquidity -= chunkLiquidity` inside an `unchecked` block with no guard that `removedLiquidity >= chunkLiquidity`. An attacker can first transfer a position away via a zero-amount `s …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-11-panoptic-findings/issues/516
- https://github.com/code-423n4/2023-11-panoptic-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.